# No Checksum.sig or Checksum.asc in Rocky 9 Image Repo

**URL:** <https://forums.rockylinux.org/t/no-checksum-sig-or-checksum-asc-in-rocky-9-image-repo/16634>\
**Category:** Rocky Linux Help & Support\
**Created:** [November 26, 2024, 8:22pm UTC](https://forums.rockylinux.org/t/no-checksum-sig-or-checksum-asc-in-rocky-9-image-repo/16634 "2024-11-26T20:22:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gonthim](https://avatars.discourse-cdn.com/v4/letter/g/71e660/32.png) [@Gonthim](https://forums.rockylinux.org/u/Gonthim)\
**Post date:** [November 26, 2024, 8:22pm UTC](https://forums.rockylinux.org/t/no-checksum-sig-or-checksum-asc-in-rocky-9-image-repo/16634/1 "2024-11-26T20:22:25Z")

</div>

I was seeing this to verify the repo for Rocky 8, but it’s not in the Rocky 9 image repos.

Wondered if that was a mistake, or if I should verify the repo signature another way?

Thanks

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [November 26, 2024, 8:26pm UTC](https://forums.rockylinux.org/t/no-checksum-sig-or-checksum-asc-in-rocky-9-image-repo/16634/2 "2024-11-26T20:26:10Z")

</div>

Due to how keykeeper (the signing tool in peridot, our build system) operates, it is not allowed to sign arbitrary files outside of the build system.

Checksums can also be verified in our github repo, where the commits are signed by verified GPG keys, until we can find a way to have signed checksum files in our mirrors that does not violate the integrity and security design of our build system infrastructure.

> **[GitHub - rocky-linux/checksums: Contains checksums of images, ISO's, and so on for...](https://github.com/rocky-linux/checksums)**
>
> Contains checksums of images, ISO's, and so on for Rocky Linux

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [January 25, 2025, 8:26pm UTC](https://forums.rockylinux.org/t/no-checksum-sig-or-checksum-asc-in-rocky-9-image-repo/16634/3 "2025-01-25T20:26:13Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.